2026-05-11 归档

今日共收录 747 条安全情报,包含 109 个 CVE,376 篇安全通告,以及 5 篇研究论文。

← 返回归档列表
安全公告2026-05-10 发布INFO

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that...

CVE-2022-50954

WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies...

CVE-2021-47950

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interfac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to...

CVE-2021-47949

CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to...

CVE-2022-50944

Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the...

CVE-2021-47930

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handle

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability...

CVE-2021-47927

WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows...

CVE-2021-47928

Opencart TMD Vendor System 3.x contains a blind SQL injection vulnerability that allows unauthenticated attackers to ext

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow...

CVE-2021-47925

CMDBuild 3.3.2 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to injec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows...

CVE-2021-47941

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows...

CVE-2021-47926

Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows authenticated attackers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated...

CVE-2021-47931

Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject mali

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative...

CVE-2021-47938

ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows au

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows...

CVE-2021-47929

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attacker

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers...

CVE-2021-47935

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary co

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated...

CVE-2021-47943

TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

e107 CMS 2.3.0 contains a remote code execution vulnerability that allows authenticated users...

CVE-2021-47937

e107 CMS 2.3.0 contains a remote code execution vulnerability that allows authenticated users with theme installation pe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

Ultimate Product Catalog 5.8.2 contains a stored cross-site scripting vulnerability that allows...

CVE-2021-47924

Ultimate Product Catalog 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows...

CVE-2021-47910

AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This...

CVE-2026-8244

A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This impacts an unknown function

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-10 发布INFO

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function...

CVE-2026-8235

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of

历史摘要 · 未重新核验 · GitHub Advisory